request_signing-ssm 0.1.0.pre1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 908914d41f65aa955d890a6012924e46d27dcedd
+  data.tar.gz: 13d3d06c607334784a485e7b39689d831c44b570
+SHA512:
+  metadata.gz: d08cef5320b59cde2f59308e042f9de916569f3298b20a4b06d371eb45bafce73119574e8fed87835bb44330e4827edfe2f65e620eaaa781c890f3ac38f699ec
+  data.tar.gz: 75505b6d532b733faf3964c925217f26a373c71bd9828646758c87ad7f2f72cb8c3d4200b9b8608b33e4656a2127b46508f858cb5d5375d264dec041674ad067

data/lib/request_signing/ssm.rb

@@ -0,0 +1,106 @@
+require "aws-sdk-ssm"
+require "request_signing"
+
+module RequestSigning
+  module KeyStores
+
+    # AWS SSM-backed key store implementation
+    # @see RequestSigning::Signer
+    # @see RequestSigning::Verifier
+    # @see http://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-paramstore.html
+    class SSM
+
+      ##
+      # Makes a new instance of {RequestSigning::KeyStores::SSM}
+      #
+      # @param ssm_client [Aws::SSM::Client] an instance of configured SSM client
+      # @param path [String] path prefix for SSM GetParametersByPath operation
+      #
+      # @return [RequestSigning::KeyStores::SSM]
+      #
+      # @see http://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SSM/Client.html#get_parameters_by_path-instance_method
+      ##
+      def self.with_ssm_path(ssm_client:, path:)
+        ssm_options = {
+          path: path,
+          recursive: false,
+          with_decryption: true
+        }
+        new(ssm_client: ssm_client, ssm_options: ssm_options)
+      end
+
+      ##
+      # Makes a new instance of {RequestSigning::KeyStores::SSM}
+      #
+      # @param ssm_client [Aws::SSM::Client] an instance of configured SSM client
+      # @param ssm_options [Hash] custom parameters for SSM GetParametersByPath operation
+      #
+      # @return [RequestSigning::KeyStores::SSM]
+      #
+      # @see http://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SSM/Client.html#get_parameters_by_path-instance_method
+      ##
+      def self.with_ssm_options(ssm_client:, ssm_options:)
+        new(ssm_client: ssm_client, ssm_options: ssm_options)
+      end
+
+      def initialize(ssm_client:, ssm_options:)
+        @ssm_client = ssm_client
+        @ssm_options = ssm_options
+        @loaded = false
+        @keys = {}
+      end
+
+      # @param key_id [String] id of the key to retrieve
+      #
+      # @return [String] key contents
+      #
+      # @raise [RequestSigning::KeyNotFound] when requested key is not found
+      # @raise [Aws::SSM::Errors::ServiceError] when keys were not eager loaded and loading fails
+      def fetch(key_id)
+        load! unless loaded?
+        @keys.fetch(key_id)
+      rescue KeyError
+        raise KeyNotFound, key_id
+      end
+
+      # @param key_id [String] id of the key
+      #
+      # @return true if store knows this key
+      # @return false if store does not recognize the key
+      #
+      # @raise [Aws::SSM::Errors::ServiceError] when keys were not eager loaded and loading fails
+      def key?(key_id)
+        load! unless loaded?
+        @keys.key?(key_id)
+      end
+
+      # Eager loads the keys
+      #
+      # @raise [Aws::SSM::Errors::ServiceError]
+      def load!
+        return if loaded?
+
+        keys = {}
+        next_token = nil
+        loop do
+          params = @ssm_options.merge(next_token: next_token)
+          response = @ssm_client.get_parameters_by_path(params)
+          response.parameters.each do |p|
+            keys[p.name] = p.value
+          end
+          next_token = String(response.next_token)
+          break if next_token.empty?
+        end
+
+        @keys = keys
+        @loaded = true
+      end
+
+      def loaded?
+        !!@loaded
+      end
+    end
+
+  end
+end
+

metadata

@@ -0,0 +1,74 @@
+--- !ruby/object:Gem::Specification
+name: request_signing-ssm
+version: !ruby/object:Gem::Version
+  version: 0.1.0.pre1
+platform: ruby
+authors:
+- Vlad Yarotsky
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2017-10-27 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: request_signing
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.1.0.pre1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.1.0.pre1
+- !ruby/object:Gem::Dependency
+  name: aws-sdk-ssm
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1'
+description: AWS SSM key store for request_signing gem
+email:
+- vlad@remind101.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/request_signing/ssm.rb
+homepage: https://github.com/remind101/request_signing
+licenses:
+- MIT
+metadata:
+  yard.run: yri
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">"
+    - !ruby/object:Gem::Version
+      version: 1.3.1
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.6.8
+signing_key: 
+specification_version: 4
+summary: AWS SSM key store for request_signing gem
+test_files: []